All Articles

CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE

Cengage LTI Session Management Leakage

ICYMI: 10 Cybersecurity Acronyms You Should Know in 2023

CVE-2022-27518: Critical Fix Released for Exploited Citrix ADC, Gateway Vulnerability

Patch Tuesday - December 2022

Tis the Season to Be Wary: Three Holiday Shopping Scams To Watch For

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

Metasploit Wrap-Up: 12/9/22

Zachary Goldman

AWS Graviton Processor Support on Insight Agent

CVE-2022-4261: Rapid7 Nexpose Update Validation Issue (FIXED)

ISO 27001 Certification: What it is and why it matters

Leaked Android Platform Certificates Create Risks for Users

Metasploit Weekly Wrap-Up: 12/2/22

Navya Harika Karaka

Velociraptor Version 0.6.7: Better Offline Collection, Encryption, and an Improved NTFS Parser Dig Deeper Than Ever

Metasploit Weekly Wrap-Up: 11/18/22

Spencer McIntyre

Rapid7 Analysis: CVE-2022-41622

Rapid7 Analysis: CVE-2022-41800

Rapid7 Takes Home 2 Awards and a Highly Commended Recognition at the 2022 Belfast Telegraph IT Awards

CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures

How to Develop a SOAR Workflow to Automate a Critical Daily Task

CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities